This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.mft File: FivG9rrBQqA6uxp62RaQaD8DpNw.mft (raw, json) Hash identifier: X7KIyjvKIp97vfJGj4PP5A7EBNUQu28zOv2cs9ahBe4= Subject key identifier: DA:5B:E9:97:97:66:D8:32:31:59:70:98:1F:BB:29:8C:7E:8C:6F:10 Authority key identifier: 16:2B:C6:F6:BA:C1:42:A0:3A:BB:1A:7A:D9:16:90:68:3F:03:A4:DC Certificate issuer: /CN=162bc6f6bac142a03abb1a7ad91690683f03a4dc Certificate serial: 019AF12D80606677DFE3F8B54D372171D078 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FivG9rrBQqA6uxp62RaQaD8DpNw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.mft Manifest number: 1191 Signing time: Sat 06 Dec 2025 01:01:22 +0000 Manifest this update: Sat 06 Dec 2025 01:01:22 +0000 Manifest next update: Sun 07 Dec 2025 01:01:22 +0000 Files and hashes: 1: FivG9rrBQqA6uxp62RaQaD8DpNw.crl (hash: BNLKhoFjXrELWliJToKedzB2iDlBdQKZylZ2rHkPUC8=) 2: ZuMY1XotbixRHp-2hF8zeuwVNac.roa (hash: cWcV3AJ97upwcCtlMiiXPFQ1J792OYZqXfGtYafZgg0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.mft rsync://rpki.ripe.net/repository/DEFAULT/FivG9rrBQqA6uxp62RaQaD8DpNw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:80:60:66:77:df:e3:f8:b5:4d:37:21:71:d0:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=162bc6f6bac142a03abb1a7ad91690683f03a4dc Validity Not Before: Dec 6 01:01:22 2025 GMT Not After : Dec 7 01:01:22 2025 GMT Subject: CN=da5be9979766d832315970981fbb298c7e8c6f10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ab:c8:ec:32:6c:bb:42:f2:5b:f5:8c:6d:23: a3:f5:20:1e:72:df:33:e3:d4:eb:c9:01:f2:ca:5b: 00:08:86:3d:4c:eb:30:b1:22:7b:29:6a:33:de:91: 45:5f:b2:8c:ae:77:d7:25:de:68:b3:96:62:39:c4: 2a:90:91:3c:3c:39:46:80:e7:7c:a7:33:4c:72:28: 84:c9:39:7e:5b:a7:44:e0:47:14:12:0d:98:73:40: d1:f8:9f:dc:9e:59:e1:aa:5c:7a:ae:e9:8b:99:f4: 7c:9d:36:8a:38:80:fb:66:63:97:f0:2f:52:fb:cc: ca:fb:ae:1e:91:2e:dc:0c:ca:bd:90:ed:d8:fd:3b: 6b:6b:20:de:4d:6e:6a:f1:92:b6:c5:53:5d:23:f1: 46:0b:84:73:36:ba:86:b7:3a:a9:21:4b:ef:a6:0e: d5:c6:bd:d3:15:5a:b3:dd:9f:97:35:a4:ff:bf:b4: a7:47:db:78:f0:d7:6a:ee:0e:a0:5f:44:66:e1:da: 74:d4:41:f9:6f:b6:23:16:4e:48:23:ce:21:17:4d: 9c:b7:07:f7:e5:0a:65:9c:63:d7:62:df:b7:15:b8: 3b:b2:6c:85:29:97:96:4f:e9:74:74:7f:1c:c5:b4: a9:a6:09:48:98:bc:15:59:7e:f0:17:96:29:37:ed: 8e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:5B:E9:97:97:66:D8:32:31:59:70:98:1F:BB:29:8C:7E:8C:6F:10 X509v3 Authority Key Identifier: keyid:16:2B:C6:F6:BA:C1:42:A0:3A:BB:1A:7A:D9:16:90:68:3F:03:A4:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FivG9rrBQqA6uxp62RaQaD8DpNw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:53:7a:46:f9:cc:6e:1f:db:9e:da:e8:9f:c6:99:58:15:64: 74:37:9a:eb:bc:f7:ee:ce:11:ea:6a:fd:f9:f6:3f:49:23:43: 49:8b:71:86:cf:46:ac:25:15:8b:48:db:0f:11:0f:01:a4:6c: 78:1c:c8:c1:0b:63:84:0f:c3:1b:c4:a5:dd:85:d7:9f:60:83: 16:7d:0f:a5:c8:01:00:fc:aa:31:be:8a:c3:d9:46:b6:a8:4c: 14:1f:9f:0e:99:5e:11:9e:a1:09:48:87:f3:50:f7:f7:39:46: 2a:bc:c7:2a:be:12:15:c4:48:87:65:f8:ab:98:4c:f7:b4:9b: ab:d0:44:fa:66:48:26:66:57:96:9f:b2:8b:b1:3a:ea:5a:37: 13:d6:64:02:a7:0c:d0:05:a5:f6:6c:ac:1f:89:45:67:5d:81: 74:22:29:00:b3:b2:08:41:48:3d:ee:47:ca:78:a5:4a:40:49: 48:f3:41:e0:56:7f:ae:0d:3f:b1:18:02:4e:ae:8f:38:ba:cc: d4:82:1d:2e:49:0f:01:48:5d:5a:0a:ee:00:d5:e4:76:5a:65: c4:21:a9:8f:79:ed:2d:d4:a4:a3:12:cf:aa:8f:f6:64:c5:63: c1:0c:45:ec:4d:ff:c1:29:85:3f:ef:e4:fc:da:ad:c1:68:79: d3:4c:27:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLYBgZnff4/i1TTchcdB4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MmJjNmY2YmFjMTQyYTAzYWJiMWE3YWQ5MTY5MDY4M2Yw M2E0ZGMwHhcNMjUxMjA2MDEwMTIyWhcNMjUxMjA3MDEwMTIyWjAzMTEwLwYDVQQD EyhkYTViZTk5Nzk3NjZkODMyMzE1OTcwOTgxZmJiMjk4YzdlOGM2ZjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKvI7DJsu0LyW/WMbSOj9SAect8z 49TryQHyylsACIY9TOswsSJ7KWoz3pFFX7KMrnfXJd5os5ZiOcQqkJE8PDlGgOd8 pzNMciiEyTl+W6dE4EcUEg2Yc0DR+J/cnlnhqlx6rumLmfR8nTaKOID7ZmOX8C9S +8zK+64ekS7cDMq9kO3Y/TtrayDeTW5q8ZK2xVNdI/FGC4RzNrqGtzqpIUvvpg7V xr3TFVqz3Z+XNaT/v7SnR9t48Ndq7g6gX0Rm4dp01EH5b7YjFk5II84hF02ctwf3 5QplnGPXYt+3Fbg7smyFKZeWT+l0dH8cxbSppglImLwVWX7wF5YpN+2O4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNpb6ZeXZtgyMVlwmB+7KYx+jG8QMB8GA1UdIwQY MBaAFBYrxva6wUKgOrsaetkWkGg/A6TcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRml2RzlyckJRcUE2dXhwNjJSYVFhRDhEcE53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yMDU4MWYtYmQ1ZS00ZWExLTgyMTct MGJlN2FhZThhMGQxLzEvRml2RzlyckJRcUE2dXhwNjJSYVFhRDhEcE53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8yMDU4MWYtYmQ1ZS00ZWExLTgyMTctMGJlN2FhZThhMGQx LzEvRml2RzlyckJRcUE2dXhwNjJSYVFhRDhEcE53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOlN6RvnM bh/bntron8aZWBVkdDea67z37s4R6mr9+fY/SSNDSYtxhs9GrCUVi0jbDxEPAaRs eBzIwQtjhA/DG8Sl3YXXn2CDFn0PpcgBAPyqMb6Kw9lGtqhMFB+fDpleEZ6hCUiH 81D39zlGKrzHKr4SFcRIh2X4q5hM97Sbq9BE+mZIJmZXlp+yi7E66lo3E9ZkAqcM 0AWl9mysH4lFZ12BdCIpALOyCEFIPe5HynilSkBJSPNB4FZ/rg0/sRgCTq6POLrM 1IIdLkkPAUhdWgruANXkdlplxCGpj3ntLdSkoxLPqo/2ZMVjwQxF7E3/wSmFP+/k /NqtwWh500wnSQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:12:27 2025 by rpki-client